scenri 0.14.0 → 0.16.0

package/CHANGELOG.md

@@ -1,5 +1,75 @@
 # Changelog
 
+## [0.16.0](https://github.com/tonygorb/Scenri/compare/v0.15.1...v0.16.0) (2026-09-23)
+
+
+### Features
+
+* a real code screen for phones, and a six-digit code ([01f2fed](https://github.com/tonygorb/Scenri/commit/01f2fedc14f7cfb4cba205d1ae1ea51e8c213f78))
+* allow Scenri through the firewall with one press ([8ca9b5f](https://github.com/tonygorb/Scenri/commit/8ca9b5f64ce49894c00490439f7d00b26a903e0f))
+* **cli:** open Scenri on a phone on the same Wi-Fi ([5d25779](https://github.com/tonygorb/Scenri/commit/5d25779d60b14751f85df8d88cf1ea993c6b79bd))
+* open Scenri on your phone, and Settings one idea per page ([4a6601d](https://github.com/tonygorb/Scenri/commit/4a6601d0608d97137e34f2973d6c1eb2b6e5e409))
+* **studio:** open on your phone, in Settings, General ([9701956](https://github.com/tonygorb/Scenri/commit/9701956625023141d2d9b7257ddd978b018f0f8e))
+* **studio:** Phone and tablet gets its own page in Settings ([6f0ff64](https://github.com/tonygorb/Scenri/commit/6f0ff64353109e6dc9adf76b6638564cc3e5f459))
+* **studio:** Settings, one idea per page ([34e6937](https://github.com/tonygorb/Scenri/commit/34e69374ef3f7db82cf4466299de471f3bf84c77))
+
+
+### Bug Fixes
+
+* **cli:** the code page's privacy note is one centred line ([0f33bbe](https://github.com/tonygorb/Scenri/commit/0f33bbe79d31be5cc8e3978ade9de3eb5bbd3eb7))
+* harden the phone code, and settle the review's findings ([ee6dd1d](https://github.com/tonygorb/Scenri/commit/ee6dd1d3226f890abc1d776de092d9d22952893d))
+* plain English on the code page and the phone settings ([f7355d5](https://github.com/tonygorb/Scenri/commit/f7355d5f37b1e239d64d9ccc6cc71b0eb43a68a3))
+
+## [0.15.1](https://github.com/tonygorb/Scenri/compare/v0.15.0...v0.15.1) (2026-09-23)
+
+
+### Bug Fixes
+
+* **publish:** make room for the scene cards under the package size line ([171ce2a](https://github.com/tonygorb/Scenri/commit/171ce2aa4ae40573f8b754193b2fec74338c5808))
+* **publish:** make room for the scene cards under the package size line ([baea05f](https://github.com/tonygorb/Scenri/commit/baea05f0b09d820f105d9d47e16722deb8a089e5))
+
+## [0.15.0](https://github.com/tonygorb/Scenri/compare/v0.14.0...v0.15.0) (2026-09-23)
+
+
+### Features
+
+* **scene:** a shot is read for its place alone ([26ba5ef](https://github.com/tonygorb/Scenri/commit/26ba5ef93615d7c3d23b94d189e60cc1e308cc4a))
+* **scene:** Add pictures means add pictures; a scene can start from one of your shots ([b026ab6](https://github.com/tonygorb/Scenri/commit/b026ab66fce5a1a876f082efb4f2a1150a8254c5))
+* **scenes:** a scene studio conversation ([e1fa96b](https://github.com/tonygorb/Scenri/commit/e1fa96bb1b2d2ba7a79018cce3e3c4da7504d82e))
+* **scenes:** every world's surface, light and idea rows are pictures ([373650c](https://github.com/tonygorb/Scenri/commit/373650cb37da6045ade68b0a014e2f7109848eaa))
+* **scenes:** Sunlit stone's surface, light and idea rows are pictures (pilot) ([ea73eee](https://github.com/tonygorb/Scenri/commit/ea73eee1b98f57cad60082aecfc973f5e729156e))
+* **scenes:** the questions after the world are the world's own ([d59e317](https://github.com/tonygorb/Scenri/commit/d59e3177bb853554c22d1aca4040f2cdc3630950))
+* **studio:** creation conversations show four cards in a row instead of six ([2cca0bb](https://github.com/tonygorb/Scenri/commit/2cca0bbb61b0b79808fcc36b29fb026d8a94413c))
+
+
+### Bug Fixes
+
+* **codex:** a prompt that ends in a full stop is not given a second one ([816047d](https://github.com/tonygorb/Scenri/commit/816047dadaa8c9a54f2a9d771d77821b3d7c2be1))
+* **conversation:** a question held while an earlier answer changes is live again after ([df7f4c4](https://github.com/tonygorb/Scenri/commit/df7f4c4c7f79efdcf0831572184563e4b21c47ae))
+* **create:** a scene's own words never silence its camera ([f60a5b3](https://github.com/tonygorb/Scenri/commit/f60a5b30d5fc256b5ec562dec19819730f049725))
+* **create:** only a figure's treatment sends a scene's plate with a shot ([4201d06](https://github.com/tonygorb/Scenri/commit/4201d065e2f728d1a238b473c5db6d298bbd6832))
+* **feed:** a search narrows from its first letter ([03cf16c](https://github.com/tonygorb/Scenri/commit/03cf16c0030b95b16e5018f3dfc5a71ea49fb9e0))
+* **feed:** a search reads what people wrote, and its first letter narrows ([059f8f3](https://github.com/tonygorb/Scenri/commit/059f8f3c7bd21a7fc968fe033b2bd9a45ae60cb6))
+* **feed:** a word starts after a space or punctuation, in any script ([257c6b7](https://github.com/tonygorb/Scenri/commit/257c6b76a207658bc7703d3b12cd5ec49767c780))
+* **scene:** a saved scene keeps the figure line it was read with ([9ecf373](https://github.com/tonygorb/Scenri/commit/9ecf3735d0debf0a801f66ed2635ca4bceebfdd2))
+* **scene:** a scene's first picture draws only its own words and nothing lifted from the references ([54184e4](https://github.com/tonygorb/Scenri/commit/54184e4e981dc4ad515e05568145ce250e389446))
+* **scene:** a scene's picture is drawn from its words, never from its references ([91a6dd2](https://github.com/tonygorb/Scenri/commit/91a6dd2d5addb0f35bcd5846f5e5baebe2365e37))
+* **scene:** a shot card is named by the start of its prompt, not all of it ([201882c](https://github.com/tonygorb/Scenri/commit/201882c15aab8753eb7d6607dbe0af440138300e))
+* **scenes:** every scene card redrawn as one physically real photograph ([a785b48](https://github.com/tonygorb/Scenri/commit/a785b489f449f68627e386965e50834eb28e1806))
+* **scenes:** saving a scene draws nothing, and the set is a counted press ([5251ca2](https://github.com/tonygorb/Scenri/commit/5251ca217d66c8342331ff62c8c63ce05c88838a))
+* **scenes:** the draw-in-use button wears the page's ghost pill, not a fill that reads as disabled ([959b72c](https://github.com/tonygorb/Scenri/commit/959b72c5873e551cab3322c937c2dcb16cd09e59))
+* **scenes:** the server no longer cuts a guided direction, and every one asks for an original arrangement ([e85b63c](https://github.com/tonygorb/Scenri/commit/e85b63ca8a65aa76702f07d5144aceb42957d1ff))
+* **scene:** the reader gives a colour its strength, not just its name ([e1103f6](https://github.com/tonygorb/Scenri/commit/e1103f61acbce5078a208e9b0687409c213edfbf))
+* **scene:** the reader keeps lettering and synthesis, and drops the advertisement ([571f494](https://github.com/tonygorb/Scenri/commit/571f4949f2f71c36f12e55280b208e10f0c08ab4))
+* **scene:** the shot picker holds still, speaks, and lets Escape clear it ([16fb509](https://github.com/tonygorb/Scenri/commit/16fb5094f41bbcb5a9d89f94ad7c917232851ecb))
+* **shots:** a glossy product is lit and framed as a campaign hero ([69ef00b](https://github.com/tonygorb/Scenri/commit/69ef00b912651ee367d9a42cada5ff170ca0dd0a))
+* **shots:** a glossy product takes the set's light, its screen off, shown once ([ac19aec](https://github.com/tonygorb/Scenri/commit/ac19aec96f1d534a0db04290fa5dc3c6aa4f130a))
+* **shots:** a phone design on a wide screen becomes the desktop app, and a refine can swap the screen ([d20b5e9](https://github.com/tonygorb/Scenri/commit/d20b5e96f21ee19980bcd65449fac70af83c93f6))
+* **shots:** a picture means what the words beside it say, and can be a device's screen ([ff03a32](https://github.com/tonygorb/Scenri/commit/ff03a320ad82d4d0891fe0bc82d46c0264bd1aac))
+* **shots:** a product alone is staged as a campaign image, held the way its world holds things ([7e12b56](https://github.com/tonygorb/Scenri/commit/7e12b56b52c5aaf5c3264890a37722d707bf4981))
+* **studio:** a picked card says it is picked, and a row respects reduced motion ([9663c4e](https://github.com/tonygorb/Scenri/commit/9663c4e3843ec5d617a52ad13d4d2bf67ae10921))
+* **studio:** a shot search not read yet never says it found nothing ([bddc624](https://github.com/tonygorb/Scenri/commit/bddc6241facf1b54a02be498ea8bd46d5482624a))
+
 ## [0.14.0](https://github.com/tonygorb/Scenri/compare/v0.13.2...v0.14.0) (2026-09-22)
 
 

package/README.md

@@ -35,7 +35,7 @@ Most AI image tools give you a prompt box and a slot machine. Scenri gives you t
 
 Every shot keeps its lineage. Branch an edit from any shot, put the two side by side, and the drift heatmap shows you exactly where the model changed your product when it should not have.
 
-It runs as a local server on `127.0.0.1`. Your brands, your images, and your keys stay on your disk.
+It runs as a local server on your own computer. Your brands, your images, and your keys stay on your disk. To use it from a phone or tablet on the same Wi-Fi, open Settings, Local access, and scan the QR code.
 
 ## What a brief produces
 
@@ -126,7 +126,7 @@ Your Codex session is yours: Scenri runs the official `codex` commands on your m
 |---|---|---|
 | `SCENRI_HOME` | `~/.scenri` | where brands, images, and keys live |
 | `SCENRI_PORT` | `4747` | port |
-| `SCENRI_HOST` | `127.0.0.1` | this machine only, see the note below |
+| `SCENRI_HOST` | `127.0.0.1` | the studio's own listener; `127.0.0.1` given explicitly also turns off phone access, see the note below |
 | `SCENRI_NO_OPEN` | unset | set to `1` to skip opening a browser |
 | `SCENRI_NO_UPDATE_CHECK` | unset | set to `1` to never ask npm for the latest version |
 | `SCENRI_REGISTRY` | npmjs | registry for the update check and downloads (mirrors, forks, airgaps) |
@@ -135,7 +135,7 @@ Your Codex session is yours: Scenri runs the official `codex` commands on your m
 
 `OPENROUTER_API_KEY`, `REPLICATE_API_TOKEN` and `FAL_KEY` are read from the environment as an alternative to entering them in Settings.
 
-**Before you change `SCENRI_HOST`:** Scenri has no accounts, so anyone who can reach the port can spend your API keys and delete your library. Setting `SCENRI_HOST=0.0.0.0` opens it to your local network so you can use it from a phone. That path prints a URL carrying a one-time access token, refuses every request without it, and rejects unfamiliar `Host` headers. Treat it as convenience on a network you trust, not as a security boundary.
+**Phones and tablets.** Scenri also answers on this computer's Wi-Fi or Ethernet address, so a phone on the same network can open it: Settings, Local access shows a QR code. Scenri has no accounts, so every device other than this computer has to bring a six-digit code, which rides inside the QR code and the link; typing the bare address asks for it, wrong guesses are slowed to a crawl, and **New code** signs every device out. The first time, macOS or Windows may ask whether Node may accept incoming connections: allow it, or phones cannot reach Scenri. Setting `SCENRI_HOST=127.0.0.1` keeps Scenri to this computer alone. Over plain http the code travels unencrypted, like everything else, so treat phone access as convenience on a network you trust.
 
 ## Layout
 

package/dist/{chunk-MHTA6O3A.js → chunk-LMXHCXUC.js}

@@ -408,7 +408,11 @@ function ensureIndexes(db) {
 }
 function searchTextSql(alias) {
   const brief = `CASE WHEN json_valid(${alias}.brief) THEN ${alias}.brief ELSE '{}' END`;
-  return `trim(coalesce(${alias}.prompt, '') || ' ' ||
+  const said = `CASE WHEN json_array_length(${brief}, '$.tokens') > 0
+      THEN (SELECT group_concat(json_extract(je.value, '$.v'), ' ') FROM json_each(${brief}, '$.tokens') AS je
+             WHERE json_extract(je.value, '$.t') = 'text')
+      ELSE ${alias}.prompt END`;
+  return `trim(coalesce(${said}, '') || ' ' ||
     coalesce((SELECT group_concat(je.value, ' ') FROM json_each(${brief}, '$.templateFields') AS je), '') || ' ' ||
     coalesce((SELECT group_concat(coalesce(json_extract(je.value, '$.name'), '') || ' ' || coalesce(json_extract(je.value, '$.hex'), ''), ' ')
                 FROM json_each(${brief}, '$.tokens') AS je WHERE json_extract(je.value, '$.t') = 'color'), ''))`;
@@ -434,8 +438,11 @@ function tokenRowsFromNodesSql() {
             FROM nodes n
            WHERE json_extract(${brief}, '$.templateId') IS NOT NULL`;
 }
-var SEARCH_INDEX_VERSION = "v1";
+var SEARCH_INDEX_VERSION = "v2";
 function ensureSearch(db) {
+  const marker = db.prepare("SELECT value FROM settings WHERE key='search_index'").get()?.value;
+  if (marker !== SEARCH_INDEX_VERSION)
+    db.exec("DROP TRIGGER IF EXISTS nodes_search_ai; DROP TRIGGER IF EXISTS nodes_search_au;");
   db.exec(`
     CREATE VIRTUAL TABLE IF NOT EXISTS nodes_fts USING fts5(text, tokenize='trigram case_sensitive 0 remove_diacritics 1');
     CREATE TABLE IF NOT EXISTS node_tokens (
@@ -460,7 +467,6 @@ function ensureSearch(db) {
       DELETE FROM node_tokens WHERE node_id = old.id;
     END;
   `);
-  const marker = db.prepare("SELECT value FROM settings WHERE key='search_index'").get()?.value;
   const bounds = db.prepare("SELECT min(rowid) AS lo, max(rowid) AS hi, count(*) AS c FROM nodes").get();
   const indexed = (rowid) => rowid !== null && !!db.prepare("SELECT 1 FROM nodes_fts WHERE rowid = ?").get(rowid);
   const whole = bounds.c === 0 || indexed(bounds.lo) && indexed(bounds.hi);
@@ -656,6 +662,8 @@ function fold(s) {
 }
 var STEM_MIN = 4;
 var TRIGRAM_MIN = 3;
+var WORDY = /^[\p{L}\p{N}]+$/u;
+var byWordStart = (term) => term.text.length < TRIGRAM_MIN && WORDY.test(term.text);
 function searchTerms(q) {
   return fold(q).trim().split(/\s+/).filter(Boolean).map((text) => ({
     text,
@@ -666,12 +674,29 @@ function termMatches(haystack, term) {
   const h = fold(haystack);
   return h.includes(term.text) || term.stem !== null && h.includes(term.stem);
 }
+function nameMatches(name, term) {
+  if (!byWordStart(term)) return termMatches(name, term);
+  return fold(name).split(/[^\p{L}\p{N}]+/u).some((w) => w.startsWith(term.text));
+}
 function matchesQuery(haystack, q) {
   const terms = searchTerms(q);
   if (!terms.length) return true;
   return terms.every((t) => termMatches(haystack, t));
 }
 var quote = (s) => `"${s.replace(/"/g, '""')}"`;
+var WORD_BREAK = `]${" 	\n\r.,;:!?(){}\"'`/\\|_+*&#@<>=~^%$["}\u05BE\u05F3\u05F4\u201C\u201D\u2018\u2019\u2026\u2013\u2014-`;
+function shortTermSql(term, column, param) {
+  if (term.text.length >= TRIGRAM_MIN) return null;
+  if (byWordStart(term))
+    return {
+      sql: `(lower(${column}) GLOB @${param}a OR lower(${column}) GLOB @${param}b)`,
+      params: { [`${param}a`]: `${term.text}*`, [`${param}b`]: `*[${WORD_BREAK}]${term.text}*` }
+    };
+  return {
+    sql: `${column} LIKE @${param} ESCAPE '\\'`,
+    params: { [param]: `%${term.text.replace(/[\\%_]/g, (c) => `\\${c}`)}%` }
+  };
+}
 function ftsMatch(term) {
   if (term.text.length < TRIGRAM_MIN) return null;
   return term.stem ? `(${quote(term.text)} OR ${quote(term.stem)})` : quote(term.text);
@@ -794,6 +819,11 @@ function filterSql(f, params, withLens) {
       params[`m${i}`] = match;
       any.push(`n.rowid IN (SELECT rowid FROM nodes_fts WHERE nodes_fts MATCH @m${i})`);
     }
+    const short = shortTermSql(term, "f.text", `l${i}`);
+    if (short) {
+      Object.assign(params, short.params);
+      any.push(`EXISTS (SELECT 1 FROM nodes_fts f WHERE f.rowid = n.rowid AND ${short.sql})`);
+    }
     if (term.tokenIds.length) {
       const names = term.tokenIds.map((t, j) => {
         params[`t${i}_${j}`] = t;
@@ -2159,10 +2189,10 @@ var REFERENCE_ROLE_DIRECTIVE = {
   // portrait as the scene image beside a selected presenter) showed which
   // half the model heard. Every treatment clause is retained word for word;
   // only the order and the register of the identity refusal changed.
-  scene: "a reference for this world, never for a person: take no identity from the person in it \u2014 not their face, not their likeness \u2014 they are an anonymous stand-in whose place the attached subject takes. Match the environment, the light, and the material, density, scale, finish and spread of the treatment applied to the figure, including which parts of the form it covers and how far it reaches; treat any product, garment or prop staged in it as the same kind of stand-in, demonstrating placement and scale \u2014 never an object to reproduce",
+  scene: "a reference for this world, never for a person: take no identity from the person in it \u2014 not their face, not their likeness \u2014 they are an anonymous stand-in whose place the attached presenter takes. Match the environment, the light, and the material, density, scale, finish and spread of the treatment applied to the figure, including which parts of the form it covers and how far it reaches; its furniture, props and objects are part of the set at their real size, never a stand-in for an attached product and never a measure of its size",
   composition: "a reference for framing, camera angle and pose only \u2014 take no subject, color, material or branding from it",
   style: "a reference for overall treatment and mood only \u2014 take no composition, subject or product detail from it",
-  reference: "a reference to match in composition, lighting and treatment"
+  reference: "an image the direction refers to, used the way the direction says; where the direction says nothing about it, a reference to match in composition, lighting and treatment"
 };
 var EDIT_REFERENCE_ROLE_DIRECTIVE = {
   product: "the exact product: keep or restore its label, shape and design faithfully",
@@ -2172,7 +2202,7 @@ var EDIT_REFERENCE_ROLE_DIRECTIVE = {
   scene: "a reference for environment, light and treatment only \u2014 take no identity from any person in it",
   composition: "a reference for framing and pose only",
   style: "a reference for treatment and mood only",
-  reference: "a reference for composition, lighting and treatment only"
+  reference: "an image the instruction refers to, used the way the instruction says; where the instruction says nothing about it, a reference for composition, lighting and treatment only"
 };
 var BUDGET_EXHAUSTED = "scenri:budget-exhausted";
 var ASPECT_TOLERANCE = 0.15;
@@ -2223,6 +2253,6 @@ function createCore(homeDir = defaultHome()) {
   };
 }
 
-export { ASPECT_TOLERANCE, BUDGET_EXHAUSTED, EDIT_REFERENCE_ROLE_DIRECTIVE, REFERENCE_ROLE_DIRECTIVE, SCHEMA_VERSION, STEM_MIN, SchemaTooNewError, SpendCapError, TRIGRAM_MIN, budgetSize, createCatalogStore, createCore, createStore, defaultHome, fold, ftsMatch, matchesQuery, ratioLabel, searchTerms, termMatches, uniqueProjectSlug, uniqueSetSlug, uniqueSlug };
-//# sourceMappingURL=chunk-MHTA6O3A.js.map
-//# sourceMappingURL=chunk-MHTA6O3A.js.map
+export { ASPECT_TOLERANCE, BUDGET_EXHAUSTED, EDIT_REFERENCE_ROLE_DIRECTIVE, REFERENCE_ROLE_DIRECTIVE, SCHEMA_VERSION, STEM_MIN, SchemaTooNewError, SpendCapError, TRIGRAM_MIN, budgetSize, createCatalogStore, createCore, createStore, defaultHome, fold, ftsMatch, matchesQuery, nameMatches, ratioLabel, searchTerms, shortTermSql, termMatches, uniqueProjectSlug, uniqueSetSlug, uniqueSlug };
+//# sourceMappingURL=chunk-LMXHCXUC.js.map
+//# sourceMappingURL=chunk-LMXHCXUC.js.map

package/dist/{cli-4A3QWRSC.js → cli-NXOTZTBT.js}

@@ -463,7 +463,7 @@ async function addOrRepair(ownEntry, say, over) {
 }
 async function rememberDecline(home) {
   try {
-    const { createCore } = await import('./src-INKSTJNC.js');
+    const { createCore } = await import('./src-XRZP3ZB5.js');
     const core = createCore(home);
     try {
       core.store.setSetting("desktop.prompt", "declined");
@@ -530,5 +530,5 @@ function tail(path, bytes = 4096) {
 }
 
 export { addToDesktop, assetsDirFor, installDeps, runDesktopCommand, runExecFile, runOpenCommand };
-//# sourceMappingURL=cli-4A3QWRSC.js.map
-//# sourceMappingURL=cli-4A3QWRSC.js.map
+//# sourceMappingURL=cli-NXOTZTBT.js.map
+//# sourceMappingURL=cli-NXOTZTBT.js.map

package/dist/index.js

@@ -86,12 +86,12 @@ try {
       break;
     }
     case "desktop": {
-      const { runDesktopCommand } = await import('./cli-4A3QWRSC.js');
+      const { runDesktopCommand } = await import('./cli-NXOTZTBT.js');
       process.exit(await runDesktopCommand(command, fileURLToPath(import.meta.url)));
       break;
     }
     case "open": {
-      const { runOpenCommand } = await import('./cli-4A3QWRSC.js');
+      const { runOpenCommand } = await import('./cli-NXOTZTBT.js');
       process.exit(await runOpenCommand(fileURLToPath(import.meta.url)));
       break;
     }